← All advisories

Moderate severityNVD Advisory· Published Aug 27, 2019· Updated Aug 4, 2024

CVE-2019-13235

CVE-2019-13235

Description

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.opencms:opencms-coreMaven	< 11.0.1	11.0.1

Affected products

2

Alkacon/OpenCms Apollo Templatedescription
ghsa-coords
pkg:maven/org.opencms/opencms-core
Range: < 11.0.1

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-2p6p-v69p-9mm9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-13235ghsaADVISORY
packetstormsecurity.com/files/154298/Alkacon-OpenCMS-10.5.x-Cross-Site-Scripting.htmlghsax_refsource_MISCWEB
aetsu.github.io/OpenCmsghsax_refsource_MISCWEB
github.com/alkacon/apollo-template/commits/branch_10_5_xghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.